Web & Frontend

leksgg Bundle

Auditoría de seguridad de un repositorio completo o de los cambios de una rama. Busca vulnerabilidades explotables (autorización, inyección, XSS, SSRF, secretos, subidas de archivos, configuración, lógica de negocio, dependencias), verifica cada hallazgo trazando la ruta de ataque y entrega un informe por gravedad con fixes propuestos. Guías específicas para Node/TS, MongoDB, Cloudflare Workers/R2 y React/Next. Se invoca con /security-audit, /security-audit diff [rama-base] o /security-audit <ruta>.

alexgoller Skill

Generate an interactive React security assessment dashboard for an Illumio PCE environment. Use this skill whenever the user asks for an interactive, visual, or live security dashboard, security posture visualization, interactive network graph of their Illumio environment, or a React-based PCE assessment. Also trigger when the user says: interactive assessment, security dashboard, visual security report, network topology view, lateral movement visualization, or wants a browser-based view of their PCE security status. Produces a single-file React (.jsx) artifact with D3 force-directed network graph, tabbed navigation, compliance cards, enforcement charts, and filterable tables — all populated from live PCE data. Requires the illumio-mcp MCP server to be connected.

alexgoller Skill

Generate an on-demand daily health and security assessment dashboard for an Illumio Core PCE environment. Produces a single-file React (.jsx) artifact covering blocked traffic, workload health and heartbeat status, security posture drift, data exfiltration indicators, and critical events from the last 24 hours. Use this skill whenever the user asks for a daily check, daily assessment, morning briefing, environment health check, what's going wrong, blocked traffic report, workload status, heartbeat check, security posture overview, exfiltration detection, PCE daily ops, or anything that implies a routine operational review of their Illumio environment. Also trigger when the user says: daily report, daily dashboard, what happened overnight, anything broken, environment status, show me problems, security findings today, blocked flows, offline workloads, agent issues, or health summary. Requires the illumio-mcp MCP server to be connected.

danblaare Bundle

Mandatory security gate that scans a component with SkillTotal BEFORE installing it. ALWAYS use this whenever the user asks to install, add, set up, enable, clone, download, or upgrade anything — npm/pnpm/yarn/bun packages, pip/uv/poetry/PyPI packages, MCP servers, Claude Code skills or plugins, agents, GitHub repos, VS Code extensions, CLI tools, or archives. Triggers on phrases like "install X", "add the X package", "npm i", "pip install", "set up the X MCP server", "add this skill/plugin", "clone and run", "upgrade X to vN". Run the scan first; never run the install command until the scan is reviewed. The scan report goes to the Obsidian skills log note, not to the chat.

katla-app Bundle

Implements cookie consent and privacy compliance using the Katla SDK (@katla.app/sdk). Use when the user mentions "Katla," "cookie consent," "cookie banner," "consent management," "KatlaProvider," "useKatlaConsent," "useKatlaCookies," "CookieBanner," "CookieCatalog," "cookie guard," "consent mode," "katla widget," or wants to add GDPR/CCPA cookie consent to a React, Next.js, Vite, or vanilla JavaScript project. Also use when integrating Google Consent Mode with cookie consent.

norravarg Bundle

Guide the agent to produce code that follows industry best practice and your own customized coding principles. Reviews everything not yet committed — staged, unstaged, and untracked files — against your coding guide, universal correctness/security/testing rules, frontend/backend conventions, language idioms, and your personal rules, verifies each finding independently before trusting it, then helps fix what you approve. Invoke manually after making changes.

nitroxinteligence Bundle

Inicializa, retoma e integra o fluxo completo da aula em uma pasta local: ambiente, React + Vite, artefatos .aula-site, imagens, build e servidor local. Use somente quando o usuário invocar $skill-aula-site-completo. Não publica, configura domínio ou substitui decisões especializadas sem ler as skills da etapa.

mgoodness Skill

Wire release-please to cut versioned releases automatically from Conventional Commits. Use when setting up or reviewing `release-please-config.json`, `.release-please-manifest.json`, or the release-please workflow. Covers the tag-trap (component in tag), the loop-trap (`GITHUB_TOKEN`-authored push), and the draft-trap (draft releases without forced tag creation). Defers App-token mechanics to `github-app-token`, hardening to `repo-hardening`, and build recipes to a language skill (e.g. `go-ci`).

boxuechen Skill

Create or update a qualified React and TypeScript Web Project for Android Chrome in the current ClawInOne Project.

boxuechen Skill

Create or update a React Native Android app in the current ClawInOne Project, build its standalone ARM64 APK, and install it on this phone.

grimlink Bundle

Run a WCAG accessibility audit on a web page. Checks heading hierarchy, landmark regions, colour contrast, ARIA attributes, keyboard navigation, target size and the WCAG 2.2 additions. Use when the user wants to check, test, or audit accessibility (a11y) on a URL or the current page.

ar-toqi Bundle

PostHog integration for Next.js App Router applications

sayonari Bundle

大学の筆記試験（中間・期末・小テスト）を AI で採点する際に用いる汎用スキル。作問→実施→スキャン→本人特定→採点基準の明文化→並列AI採点→機械検証→教員確認→返却→疑義申告対応の全工程をカバー。**採点後に必ず「教員と確認・議論すべき箇所」を答案画像キャプチャ付きHTMLで提示する**ルールを含む。科目・問題形式を問わず適用でき、具体的な運用実績（アルゴリズムとデータ構造 2026）を事例として参照できる。

jfkconstruct Bundle

Turn any local HTML game/app/animation into an animated-webp gameplay loop (playwright frame-burst -> PIL assemble), with parallel fan-out across many targets, state-injection for hard-to-reach screens, and the reduced-motion wire-in pattern. Use when the user asks for gameplay gifs/loops, animated tiles, or "capture X in motion".

kaisa-kucherenko Skill

Architecture Decision Record — structured approach to making architectural decisions for complex features. Use when: user needs to design a new feature that touches multiple layers (DB, API, frontend, security), user says '/adr', 'architectural decisions', 'decision tree', 'архітектурні рішення', 'давай продумаємо архітектуру', 'треба прийняти рішення по архітектурі', or when a feature is too complex to just start coding. Also trigger when user has a GitHub issue for a feature and wants to plan implementation before writing code. This skill is about DECISIONS, not implementation — it produces a decisions document that serves as the spec.

sergio-balecho Bundle

Use quando a tarefa criar ou alterar tela, componente, formulário, modal, lista ou estilo em qualquer framework (React, Vue, Svelte ou HTML puro) — método que lê o sistema de design existente antes de criar, cobre todos os estados, acessibilidade, responsividade e tema, e só declara pronto depois de verificação objetiva.

sergio-balecho Bundle

Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, reportings, HTML landing pages, etc. There are 10 pre-set themes with colors/fonts that you can apply to any artifact that has been creating, or can generate a new theme on-the-fly.

yosoyjavieruiz Skill

Use the built-in `Computer` sub-agent with `agent-desktop` for macOS desktop automation. Apply when a task needs application launching, accessibility snapshots, stable element refs, window focusing, semantic clicks/typing, or visual confirmation outside the browser sandbox.

mikhin Skill

What Yuri Mikhin already knows and how he verifies work — the frontend checking stack he runs on every change, how he reviews layout across viewports, and the product side of his own plugins and bots. Meant to be always on (SessionStart hook), not trigger-loaded.

nitroxinteligence Bundle

Lê copy e wireframe, propõe exatamente três direções visuais distintas e, somente após escolha explícita, aplica a direção selecionada ao React + Vite. Use somente quando o usuário invocar $skill-aula-design. Não gera imagens raster nem reescreve fatos da oferta.

nitroxinteligence Bundle

Lê a copy aprovada e cria um wireframe React + Vite funcional, monocromático, responsivo e navegável para uma landing page. Use somente quando o usuário invocar $skill-aula-wireframe. Não cria a identidade visual final nem gera imagens.

matthewtaormina Skill

Authoritative guide and standards for AODA (Accessibility for Ontarians with Disabilities Act) and WCAG 2.1/2.2 Level AA compliance across all UI components, dialogs, forms, and desktop application windows. Use when creating or modifying UI templates, CSS, interactive controls, keyboard navigation, and screen reader announcements.

ruslankhis Bundle

Implement, adapt, review or select a web interface for a Google ADK agent using a custom JSON API or AG-UI with CopilotKit, including gateways to managed Agent Runtime. Use for agent-to-browser contracts, session ownership, streaming text and tool displays. Do not activate for ordinary React styling, agent prompting alone, general cloud provisioning or non-ADK chat applications.

kwhi6693-web Bundle

Use when a user asks to create, convert, redesign, edit, present, export, or validate presentations, slide decks, PowerPoint/PPTX, HTML slides, PDF decks, slide images, covers, infographics, or diagrams, especially when native editability, Swiss/editorial design, presenter mode, AI imagery, multi-format output, or presentation QA is required.

kwhi6693-web Bundle

Create professional, dark-themed SVG diagrams of any type — architecture diagrams, flowcharts, sequence diagrams, structural diagrams, mind maps, timelines, illustrative/conceptual diagrams, and more. Use this skill whenever the user asks for any kind of technical or conceptual diagram, visualization of a system, process flow, data flow, component relationship, network topology, decision tree, org chart, state machine, or any visual representation of structure/logic/process. Also trigger when the user says "画个图" "画一个架构图" "diagram" "flowchart" "sequence diagram" "draw me a ..." or uploads content and asks to visualize it. Output is always a standalone .svg file.

mina-atef-00 Bundle

Use when converting scanned PDFs or documents to markdown/JSON/HTML. Marker (Datalab) uses surya OCR for 90+ languages including Arabic.

qualcomm-linux Bundle

Produce a self-contained HTML CI/CD reliability report for a meta-qcom family layer (meta-qcom, meta-qcom-distro, meta-qcom-3rdparty) over a window of days: sweep every LAVA job the layer's CI submitted plus the GitHub Actions runs that built the images, separate real platform failures from test-harness artefacts and lab faults, quantify coverage lost to silent skips, and close with follow-up suggestions split by owner. Use when asked to "report on CI health", "why is CI so red", "analyse the last two weeks of LAVA results", "which boards are flaky", "where are we losing test coverage", or "what should we fix to stabilise CI". The skill reports and suggests only, it never edits a test suite or a layer. Do NOT use it to root-cause a single LAVA job from its URL or ID (see qcom-lava-log), or to run meta-qcom's CI-parity checks before opening a pull request (see qcom-yocto-pre-pr-checks).

mina-atef-00 Skill

Open local HTML files in a flatpak browser (Zen/Vivaldi) from terminal. Plain `flatpak run` silently drops file:// URLs — use `--file-forwarding` + `@@u` instead.

ivelten Skill

Write and run Haskell performance benchmarks. Covers the `benchmark` cabal stanza, `tasty-bench` for timing (the default), `weigh` for memory-allocation measurement, baseline comparison to catch regressions, the laziness traps (`nf` vs `whnf`), and how to integrate with GHC profiling/flame graphs for deeper investigation. Also explains when to switch to `criterion` for HTML reports. Use when adding benchmarks, debugging a "this got slower" regression, comparing two implementations of the same function, hunting space leaks, or wiring benchmarks into CI.

rtadewald Bundle

Recria um mock de UI (imagem) como HTML + CSS + JS estáticos (sem framework), em etapas com aprovação do usuário: wireframe ASCII tipado com plano → fundo completo → componentes com fontes → assets restantes → revisão final. Use when the user mentions img-to-html or asks to recreate a UI mock as HTML.

antsteyer Bundle

Build a comprehension brief for one or several PRs as a local HTML page — the change explained in reading order, with every relevant diff hunk and out-of-diff excerpt embedded inline. Read-only, no judgement, no comments. Use before reviewing PRs, when I need to load a PR's context without challenging it yet.

guysilvere Bundle

Développement de code PWA Agence Bulles — scaffolding, structure de projet, AGENTS.md, SPEC-XXX, DATABASE.md, README.md, conventions de branche, refactoring, cleanup et bonnes pratiques par langage (HTML, CSS, JS, TS, Python, JSON). Charger pour toute phase de construction ou de nettoyage de code.

obitorinne22 Bundle

Ready-made Framer Motion (React) animation components to drop into web projects — scroll-triggered text reveal, and more added over time. Use when the user asks for scroll animations, text reveal effects, fade/reveal-on-scroll UI in a React/Next.js/Vite project, or shares a Framer.com component (framer.com/m/... or framerusercontent.com/modules/...) they want ported to plain code. Default to Framer Motion for animation in every web project unless told otherwise.

ftrout Bundle

Analyze a reported or suspicious email end to end: Received chain and SPF/DKIM/DMARC alignment, sender and Reply-To and display-name mismatches, lookalike domains, URL and redirector analysis, QR codes, HTML smuggling, attachment triage, lure classification (BEC/invoice, credential harvest, callback/TOAD, MFA push, package delivery, HR/payroll), verdict, blast radius, and response actions. Use it whenever someone pastes headers or an .eml, says "is this phishing", "a user reported this email", "check these headers", "is this sender legit", "who else got this", asks why DMARC failed, wants a phishing triage note, or forwards a suspicious invoice, voicemail, DocuSign, MFA, delivery, or payroll-change message, even if they never use the word phishing.

candy14432 Bundle

評估與改善介面、內容與互動的無障礙品質,使產品更符合 WCAG 與包容性設計原則。當任務涉及對比度、鍵盤操作、語意化、表單可用性、螢幕閱讀器支援或 a11y 檢查時使用。

candy14432 Bundle

Add a friendly "waving hand" attention animation to an icon, emoji, or SVG — the element scales up, wiggles side-to-side like a real wave, then shrinks back and settles (放大 → 揮手 → 縮小歸位), looping with a pause between waves. Use this WHENEVER the user wants a hand/emoji/icon to wave, wiggle, or "say hi", asks for a 揮手 / 揮手動畫 / 手手動畫 / waving hand, wants to draw attention to a call-to-action button (提問/發問/報名/CTA) with a moving icon, or describes "放大縮小再歸位", "scale pulse", "wiggle", "attention-grabbing icon animation". Works in plain HTML/CSS, React, Vue, Svelte, and Tailwind — even if they don't name a framework or say the word "animation" explicitly.